CVE-2020-5593

HIGH 8.8CVE-2020-5593 · Published 11/06/2020 · updated 17/06/2026

In short

CVE-2020-5593 is a HIGH (CVSS 8.8) vulnerability affecting zenphoto (zenphoto).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.3% of all vulnerabilities.
Fix: update to 1.5.7 or later.

Package	Affected versions	Patched versions
zenphoto zenphoto	`< 1.5.7`	`1.5.7`

Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 1.5.7

1.5.7

More vulnerabilities in zenphoto

See all →